[Bug libc/18099] a.out: wordexp.c:1937: parse_param: Assertion `value != ((void *)0)' failed.

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=18099

--- Comment #3 from Florian Weimer <fweimer at redhat dot com> ---
(In reply to Florian Weimer from comment #1)
> Reachable even with WRDE_NOCMD, so this is a security issue in builds with
> asserts enabled (which we support).

This is incorrect because wordexp is inherently DoS-prone with crafted
patterns.

-- 
You are receiving this mail because:
You are on the CC list for the bug.